Workplace Violence Prevention Training: Requirements and Implementation Guide (2026)

Workplace violence prevention training teaches employees to identify the four recognized types of workplace violence, report incidents and threats without fear of retaliation, and respond to the hazards present at their own worksite. No federal OSHA standard requires it, but California requires nearly every employer to train when a prevention plan is first established and annually thereafter under Labor Code section 6401.9, and Texas, Washington, Oregon, and New York require it in health care or public-sector workplaces. Compliant training is never a generic video. It has to be tied to a written plan, a documented hazard assessment, and a violent incident log for that location.

This guide covers the four violence types, which jurisdictions mandate a plan and annual training, what the training must contain, how to run the hazard assessment underneath it, and how long to keep records. Requirements vary by state and industry and are still changing, so confirm your own jurisdiction with counsel or your state safety agency. Nothing here is legal advice.

What Are the Four Types of Workplace Violence?

The four-type framework comes from occupational safety research and is now written into California statute. It matters because each type calls for different controls: Type 1 is largely an engineering and cash-handling problem, while Type 2 is a de-escalation and staffing problem.

Type	Definition under California Labor Code 6401.9	Where it concentrates
Type 1: Criminal intent	Violence by a person with no legitimate business at the worksite who enters or approaches workers intending to commit a crime	Late-night retail, convenience stores, fuel stations, cash handling, delivery
Type 2: Customer or client	Violence directed at employees by customers, clients, patients, students, inmates, or visitors	Hospitals, behavioral health, emergency departments, social services, schools, transit
Type 3: Worker on worker	Violence against an employee by a present or former employee, supervisor, or manager	Any sector, often following discipline, termination, or unresolved conflict
Type 4: Personal relationship	Violence committed at work by a person who does not work there but is known to have had a personal relationship with an employee	Any workplace with a public entrance or predictable employee schedules

Type 2 dominates the injury data. Across 2021 and 2022, the Bureau of Labor Statistics recorded 57,610 nonfatal workplace violence cases in private industry requiring days away, restriction, or transfer. Health care and social assistance accounted for 41,960, or 72.8 percent, at an annualized rate of 14.2 per 10,000 full-time workers. There were also 524 workplace homicides in 2022, a series high dating to 2011.

Which States Require Workplace Violence Prevention Training?

There is no federal workplace violence standard. OSHA enforces these hazards through the General Duty Clause, Section 5(a)(1) of the OSH Act, which obligates employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm. That is a real enforcement tool, but it does not tell you what to train on, so states filled the gap.

Jurisdiction	Covered employers	Written plan required	Training cadence	Authority
California (general industry)	Nearly all employers, narrow exemptions	Yes, since July 1, 2024	Initial, then annual, plus when the plan changes	Labor Code 6401.9 (SB 553)
California (health care)	Listed facilities and service categories	Yes	Initial, then annual refresher for patient-contact staff	8 CCR section 3342
Texas (health care)	Covered health care facilities	Yes, deadline September 1, 2024	Set by the committee-approved plan	Health and Safety Code ch. 331 (SB 240)
Washington (health care)	Health care settings	Yes	Per the plan; new hires within 90 days	RCW 49.19
Oregon (health care)	Health care employers, including home health	Yes, based on periodic assessments	Annual, employees and contracted security	ORS 654.414
New York (public sector)	Public employers; program at 20 or more full-time staff	Yes at 20 or more	Initial assignment, then annual	Labor Law 27-b
Federal (private sector)	All employers under OSHA jurisdiction	No specific standard	Not specified	OSH Act General Duty Clause

New York's rules sit with the state Department of Labor, which publishes guidance for public employers. Connecticut, Illinois, Maine, Maryland, Minnesota, and New Jersey have their own health care statutes, as employment counsel tracking the area note. Read the current statutory text before building a program around any summary, including this one.

What California SB 553 Requires

California Labor Code section 6401.9, added by SB 553 and operative July 1, 2024, is the first cross-industry workplace violence mandate in the United States. Covered employers must maintain a written Workplace Violence Prevention Plan in effect at all times, specific to the hazards and corrective measures for each work area, and easily accessible to employees, their representatives, and Cal/OSHA. It can be standalone or a section inside the Injury and Illness Prevention Program.

The statute lists thirteen required plan elements, including named responsible parties, employee involvement, reporting procedures that prohibit retaliation, emergency response and evacuation or sheltering, hazard identification and correction, post-incident investigation, and an annual review. Exemptions are narrow: health care operations covered by 8 CCR section 3342, certain corrections and POST-compliant law enforcement facilities, teleworkers at locations the employer does not control, and non-public workplaces with fewer than 10 employees present that comply with the IIPP standard.

Watch one thing in 2026: section 6401.9(h) directs Cal/OSHA to propose a formal regulation and the Standards Board to adopt it no later than December 31, 2026. The statute stays in force meanwhile, but the final rule may add detail.

What Workplace Violence Prevention Training Must Cover

Under section 6401.9(e), training must use content and vocabulary appropriate to the educational level, literacy, and language of the workforce. Employees train when the plan is first established and annually after, on all of the following:

• The plan, how to obtain a free copy, and how to help develop it.
• The definitions and requirements of the statute, including the four violence types.
• How to report incidents, threats, or concerns to the employer or law enforcement without reprisal.
• Hazards specific to their own jobs, the corrective measures in place, how to seek assistance, and strategies to avoid physical harm.
• The violent incident log and how to obtain copies of the required records.
• Interactive questions and answers with a person knowledgeable about the plan.

That last requirement is what trips up recorded-video programs. A video can carry the first five topics, but you still need a channel where a knowledgeable person answers questions. Cal/OSHA's health care standard is explicit: for training not given in person, questions must be answered within one business day. Additional training is also required when a new hazard is identified or the plan changes, and it may cover only what changed. The same modular logic runs through other mandates, which we cover in the complete guide to compliance training.

How to Run a Workplace Violence Hazard Assessment

The hazard assessment is what makes training site-specific. Section 6401.9 requires inspections when the plan is first established, after each incident, and whenever the employer learns of a new or previously unrecognized hazard. A workable sequence:

1. Walk each work area separately. Assess lighting, sightlines, entry control, alarm and duress systems, exits, parking, cash handling, and lone-worker or late-shift exposure. A back stockroom and a customer counter are different hazards.
2. Pull your own incident history. Review prior logs, security reports, injury records, and near misses. Oregon's assessment must measure violence frequency over the preceding five years.
3. Ask the people doing the work. Employee involvement is a plan requirement in California, a committee requirement in Texas, and a safety-committee requirement in Oregon and Washington.
4. Rank and correct. Apply engineering controls first, then work practice controls, then training. OSHA's Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers is the most detailed free methodology available, and much transfers to other sectors.
5. Feed the findings into training. Every hazard identified and control implemented is a topic the affected employees must be trained on.

Frontline retail exposure differs from clinical exposure, which is why we treat them separately in the retail training guide and in healthcare compliance training beyond HIPAA.

Violent Incident Logs and Record Retention

California requires a log entry for every incident, built from employee statements, witness accounts, and investigation findings, with personal identifying information omitted. Each entry records the date, time, and location; the violence type; a description; who committed it; the circumstances, such as low staffing or working alone; whether a weapon was involved; the consequences; and who filed it.

Record	Minimum retention under Labor Code 6401.9	Employee access
Hazard identification, evaluation, and correction	5 years	Within 15 calendar days, free
Training records	1 year	Within 15 calendar days, free
Violent incident logs	5 years	Within 15 calendar days, free, with identifying information omitted
Incident investigation records	5 years	Available to Cal/OSHA on request

Training records must include the dates, the contents or a summary of the session, the trainers' names and qualifications, and the names and job titles of attendees. One year is the statutory floor, and many employers keep them five years so every record type ages out together. Cal/OSHA's general industry guidance restates the same retention periods and access window.

Where Active Shooter Training Fits

Active shooter response is a subset of Type 1 and Type 4 preparedness, not a substitute for a prevention program. What it satisfies is California's emergency-procedure requirement: a means to alert employees to the presence, location, and nature of an emergency, evacuation or sheltering plans suited to the worksite, and how to get help from responders, security, and law enforcement. Treat it as one module inside the plan, and make sure the alerting method and routes you teach match the actual building. OSHA's workplace violence page collects the federal emergency-planning guidance.

Keeping Site-Specific Training Current When the Plan Changes

Writing the plan is not the recurring problem. Compliant training has to reflect each location's hazards and be re-issued whenever the plan changes, a new hazard appears, or the annual review lands. A multi-site employer can owe dozens of near-identical versions of the same training, plus translations.

That is a content-production problem, and it is where Book a demo fits. You upload the plan, hazard assessment, or site addendum you already have as a PDF, Word file, or slide deck, and it becomes a narrated animated video you revise by typing plain-language edits instead of rebuilding a timeline. When the plan is amended, update the source document and regenerate rather than re-record. Keeping the document as the single source of truth stops the video and the plan from drifting apart. For cadence, see AI video compliance refreshers, and for adjacent hazards, safety and EHS training video.

Key Takeaways

• There is no federal workplace violence standard. OSHA enforces through the General Duty Clause, and states set the training mandates.
• California Labor Code 6401.9 (SB 553), operative July 1, 2024, is the first cross-industry mandate: written plan, hazard assessment, incident log, and initial plus annual training.
• The four types each require different controls, and Type 2 (customer or client) drives most nonfatal injuries.
• Training must be site-specific and interactive. A recorded video alone does not satisfy the questions-and-answers requirement.
• In California, keep hazard, log, and investigation records five years and training records at least one year, and produce them to employees within 15 calendar days at no cost.
• New hazards and plan changes trigger additional training, so build a program you update in pieces.

FAQ

Is workplace violence prevention training required by law?

It depends on where you operate. No federal OSHA standard requires it, though OSHA can cite employers under the General Duty Clause for failing to address a recognized violence hazard. California requires it of nearly all employers under Labor Code 6401.9, and Texas, Washington, Oregon, and New York require it in health care or public-sector settings.

How often is workplace violence prevention training required?

In California, employees train when the plan is first established and annually after, plus whenever a new hazard is identified or the plan changes. Oregon requires annual training for health care employees and contracted security. New York public employers train at initial assignment and annually. Washington sets frequency in the plan but requires new hires to train within 90 days.

What are the four types of workplace violence?

Type 1 is criminal intent, committed by someone with no legitimate business at the worksite. Type 2 is customer or client violence, directed at employees by customers, patients, students, inmates, or visitors. Type 3 is worker on worker, involving a present or former employee or manager. Type 4 is personal relationship violence, committed by someone with a personal connection to an employee.

How long do we have to keep workplace violence training records?

Under California Labor Code 6401.9, training records carry a one-year minimum and must include dates, content summaries, trainer names and qualifications, and attendee names and job titles. Hazard records, violent incident logs, and investigation records are kept at least five years. All three go to employees within 15 calendar days of a request, free of charge.

Can we deliver workplace violence prevention training as a video?

Yes for most of the required content, as long as it is site-specific and matches your workforce's literacy and language levels. The gap is interactivity. California requires questions and answers with someone knowledgeable about the plan, and the health care standard requires answers within one business day when training is not in person.

References

1. 57,610 nonfatal workplace violence cases
2. General Duty Clause
3. guidance for public employers
4. employment counsel tracking the area note
5. California Labor Code section 6401.9
6. 8 CCR section 3342
7. complete guide to compliance training
8. Texas
9. Oregon
10. Washington
11. Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers
12. retail training guide
13. healthcare compliance training beyond HIPAA
14. Cal/OSHA's general industry guidance
15. OSHA's workplace violence page
16. Book a demo
17. AI video compliance refreshers
18. safety and EHS training video